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REMARKS 

The Fina! Office Action dated July 9, 2009 has been received and careMly considered. 
In this response, claims 41 and 42 have been a»nen4ed t0 correct informalities. No new matter 
has been added. Since the mmor amendmeKts to cialms 41 and 42 are not expected to rai^se any 
new issue bot will place the application in a better condition for appeal, Appticant ix;spectfiiUv 
rej^ueM.eMry..M.te 

Reconsidenitioa of the outstanding rejections in the present application is also respectfully 
requested based on the following temarks, 

i SUBSTANCE OF TELEPHONE INTERVIEW 

Applicant appreciates the time spent by Examiners Zia and Doan during the Augost 20, 
2{K)9 telephone interview. During the inter%'iew, Applicant's undersigned representative brieny 
summarized the prcscju invention and the deficiencies of the final rejcciion, I hc independent 
claims in the present application aie also briefly discussed. No agreement was reached during 
the interview. 

11. TBE ANTICIPAI ION REJECTION OF CLAIMS 1-3, 6-9. 1M2. 14-16. 19. 22. 26-28. 
34-37. AND 39 

On pages 3-7 of the Oftlce Action, claims 1-3, 6-9, 1 1-1.2, 14-16, 19, 22, 26-28, 34-37, 
and 39 were rejected under 35 O.S.C, § 102(b) as being anticipated by "Trusted Solaris S 
Operating Environraent" (hereinafter "Solaris"), This rejection is hereby respectfully traversed, 

The.se rejections are clearly deficient as the Examiner has not shown the disclosure of 
even a fraction of the claim elements by the cited references. 
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Accoiximg to MPEP § 1Q(% "the goal of examination is to deady articulate any rejection 
early in the pmsecution process so that, the applicani has the oppommity to provide evidence of 
patentability and otherwise reply completely at the earliest opportunity" (emphasis added). This 
stated goal of examination is far from being heeded (let alone achieved) in the office actions 
issued to date. The refection of independent claim 1 is illustrative of the deficiencies. 

Claim 1 recites "« network computer system for provkling security" comprising the 
following elements: (i) "« momioring Jiinciion'^-, (ii) ieast one outside server''; (iii) ''at least 
one proxy Mn'er"; (iv) "'at least one irvside server"'; and (v) "a core operating system," with their 
respective iimitations. 

While claim 1 recites five main elements, the Office Action only cites Solaris as 
ailegcdiy disclosing three out of ihe five elements^ namely Elements (i), (jii), and (v). Final 
Office Action at 3-4. The Office Action does not show ajiy evidence or offer any explajiation 
that Element (ii) ''at least one outside server' mid Element (iv) ''at least one imide server" are 
disclosed ^ywhere by Solaris. Since the Office Action foils to make even a threshold allegation 
of anticipation regarding each md every element recited in claim 1, the i"ejection cannot stand for 
at least this reason. 

Giving the Office Action the benefits of doubt, Applicant speculated tliat the Examiner 
might intend to cover Elements (ii) ieast one outside senw" and (iii) "fW least ofte proxy 
server" with the same citation (i.e., Solaris at p. 17, pam. 2) and to cover Elements (iv) "«/ leasi 
one inside server" and (v) "« core operating system" with the same citation (i.e., Solaris at p. 18, 
para. 3-5; p. 21, paiu. i-2; p. 22-24). However, none of the cited passages makes any reference 
to a server. Indeed, the Office Action only cites pages 17-24 of Solaris in the §102 rejections, 
while there is not a single instance of the word "server" appearing after page 9 of Solaris, 
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Furthemiore, the alleged disclosure of Elements (i). (Ki), and (v) is cither imclear or 
cooipletely untrue. For example^ regarding Element {iii) "a? least one proxy sen'er,'' ibe 
Examiner cites Solaris at p. 17, para. 2 which ha.s nothing to do with any proxy server and makes 
BO reference to any "proxy" or "server," In fact, Solaris never mentions a proxy server or even 
uses the word "proxy" anyvt^here in its disclosure. The Examiner nisponded to this issue as 
follows — 

"Applicant argues on page 22 of the .Remarks that Solaris never 
mentions a proxy server or even uses tlie word proxy anywhere in 
its disclosure. Examiner respectfully disagrees. Solaris discloses 
the trusted Soiaris 8 operating eiiviroament provides methods for 
limiting external access, as well as extensive internal protection 
against intruders and misuse that is eqtiivaient to the proxy server 
recited in claim 1 (see Solaris: pages 2-3)." 

Final Oftlce Action at 2 . While the Examiner's elTort in responding to Applic<mt's argument is 
appreciated, the response further highlights (rather than curing) the deficiencies in thie claim 
rejection. 

First, the Examiner's i^sponse* even if it were true, would only show that Solaris implies 
a proxy server at pages 2-3, which is notably not the passage (i.e., Solaris at p. 17, para. 2) the 
office actions have repeatedly pointed to for the dieged disclosnre of the ^'at leam one proxy 
Mn'er." The feet that the Examiner had to e.Kplain the disclosure of a proxy server by pointing 
somewhere else in the reference and, even then, only managed to find security functions "thai is 
equivalent to the proxy server'" shows that the §102 rejection of claini I wm poorly articulated, 
to say the least. The identical §102 rejection was nevertheless replicated from the Non-Final 
Office Action into the Final Office Action without changing a single word. 

Second, the pages rehed upon by the Examiner (Solaris at p. 2-3) merely list design goals 
and software capabilities of a Trusted Solaris 8 operating system. The only servers mentioned in 
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those two pages are 'Trusted Solaris 8 sen-ers" aiid '"a Domain Narac Service (DNS) seiTer^' 
(Solaris al p, 2, piua. 3). ll is completely uncleaj- whether a Trusted Solaris 8 server or another 
sender performs the security function.s allegedly equivalent to a proxy server. 

Third, even assuming that Solaris did inrpliciliy disclose the equivalent of a pmsy server 
somewhete , the Examiner has still failed to account for the limitations of the ''at ieast one proxy 
server' recited in claim 1. While it is already difficult to understand what the Examiner 
considers to be the "equivalent" of the proxy sen'er, ii is next to impossible to grasp where or 
how Solaris discloses "'wherein the at lemt one outside server for the untmsted computer 
network is able to read and write data to the at least one proxy sen'ef' or ''wherein the 
monitoring function can read and execute data from., but cannot write data to, the at least one 
proxy Mrverr 

The alleged disclosure of Element (i) "a mmitoring function for the network computer 
system" and Element (v) "a core operating system, that is a portion of an operating system." is not 
any better. The passages at Solaris p. 16, para. 2-4 are cited against the monitoring limction, and 
the passages at Solaris p. IS, para. 3-5 are cited against the core operating system. The cited 
passages are at best murky and certainly do not disclose any of the recited limitations concerning 
the interiiction of the monitoring function or the core operating system with the "'at leasi one 
outside senm','' the "«/ least one proxy sender,'' or the lea^t one inside setter." In juiy case, 
.4pplicant cmmot understand from the citations exactly which part of the Solaris system 
corresponds to the claimed monitoring function and which part corresponds to the claimed core 
operating system. 

Unfortunately, the deficiencies do not stop here in claim 1 . Sitnilar to claim 1 , the rest of 
the independent claims — claims 23, 26, and 40 — also each recite "at ieast one outside server," 
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imst one proxy server,'' and "af least om inside server" The Office Action has not cited any 
portion of Solaris thai even memions any of these servers. Nor has the Office Actioji specifica.ily 
matched up the alleged Solaris disclosure with the corresponding server functions p»esentty 
claimed, if the Examiner stiil believes tlm Solaris discloses these eiements. Applicant 
respectfully recjuests that the Examiner specifically point out the counterparts in Solaris by name 
(instead of citing paragraphs without a single word of expUuiation and lea%'ing it to Applicant to 
guess the Examiner's intetpretaiion of the reference). 

In view of the fomgoing, it is respectfully requested that the aforementioned anticipation 
rejection of claims 1-3, 6-9, 1 1-12, .14-16, 19, 22, 26-2S, 34-37, and 39 be withdrawn. 

111. TI IB OBVIOUSNESS RBJECTlONf OF CLAIMS 4-5. 10. 13. 17-18. 20-21. 23-25. 29- 
33. 38. AND 40-42 

On pages 8-16 of the Office Action, claims 4-5, 10, 13, 17-18, 20-21, 23-25, 29-33, 38, 
and 40-42 were rejected under 35 U.S.C. § 103(a) as being unpatentable over Solaris in view of 
Sheikh (U.S. Pub. No. 2002/{K}783S2). This rejection is deficient in view of the deficiencies 
noted above in the primary reference Solaris. 

With respect, Applicant finds the injection of claims 23 and 40 to be the most deficient 

and particularly troubling. Claim 23 spans almost 3 full pages and recites at Iea.st 14 

"compartments" (corresponding to exemplary items illustrated in Figure 1 of the present 

application), Sivnilarly, claim 14 spans over 3 full pages and al.so recites up to 14 

"compaftmems." Conceding that Solaris does not disclose mo.st of the claim elements, the 

Bxaminer went on io make the following assertion — 

"However, Sheikh discloses second compartment through 
foiuleenth compartment a.s described abfn'e (Sheikh: paragraphs 
0005, (KX)7 and 001 1). Thercfore, U would have been obvious to a 
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person skilled art at the time the invention was made to have 

included in Soiaris ihe feaiuTB of Sheikh as discitssed above 
because a probleni exists in the securii y software field because 
companies need to have security software ihat has the ability to 
monitor various aspects of the network and allow for forensic 
analysis when a breach or problem does occur (Sheikh: paragraph 

Final Office Action at 15, 

A quick review of "Sheikh; paragraphs 0005, 0007 and 00.1 (.replicated below) wiil 

reveal that their lelevancy (if any) to the claimed "compartments" is at best marginal — 

|0()?)5] Information security is experiencing a growth in importance 
since commercialisation of the Internet, Modest security tools 
were mostly available for free on "ftp sites" before this 
commercialization and these tools were oftCTt only used sparingly 
by systems administrators at universities and government agencies. 
The security tools wei^e generally not effective f or providing tnuch 
mom than password protection and most IT m;magers did not have 
a budget to provide security measures. Security was an esoteric 
subject discussed in academic circles. In those days, password 
protection and anti-virus tools were usually all the .security an 
organization thought it needed. Later companies began to develop 
"tlrewaH" products to protect the compmiy against attacks frotn 
ititnjders outside of the company's main network, 

[0007] Pix5sently, the concept of "security" can be divided into 
numerous distinct areas. There aie perimeter security systems such 
as firewails, which filter traffic allowed into and out of a network. 
Intrusion Detection Systems arc responsible for inspecting network 
traffic aiKi idemifying any anomalies or suspicious activity. 
CotUent fiiteritig tools are responsible for guarding against 
eitipioyee abuse of Internet seiYices such as viewing pornographic 
or other questionable web sites on company time and with 
company resources. Anti-virus tools guard against viruses hx)m 
comipting data. Finally, encryption tools are used to encrypt data 
such that only certain individuals may be able to decrypt and view 
it. Almost all security tools currendy available in the market today 
tall into one of these categories above. However, tlris does not 
mean that security threats are limited to just these specific areas. 

[001 1 ] The present invention is a security software methodology 
and system that lakes an internal approach to mitigating security 
risks from authorized md unauthorized users. The security 
softwaj5e system uses the methorlology of monitoring, in great 
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detail, any configuration changes made to infomnation systems and 
their applications witliin a .network. These systems and 
applications include web sewers, firewalls, pa>xy servers, log 
servers, intmsion deteclioa software systeim, routes and any other 
device or application which can be considem:! a part of the 
enterprise information system infrastmcture. 

Sheikh simply does not disclose a compartmenialized secure network system as in the 
present invention. Sheikh never mentions any "compartment" and certainly cannot teach or 
suggest such specific "second conipariment timxigh ibmteenth companment" as preseiitiy 
claimed. If the Examiner still belie^'es that Sheikh discloses the claimed "compartments," it is 
respectfully requested that tiie Examiner specifically match each of tlie compartment with the 
counterparts in Sheikh. 

In view of the foregoing, it is respectfully requested that tl^e afoiementioned obv.iOusne.HS 
rejeition of claims 4-5, 10, 13, 17-18, 20-21, 23-25, 29-33, 38, and 40-42 be withdrawn. 

IV. AFTER-FINAL COURSE OF ACTION 

For at least the reasons .stated above, the rejections of the pending ciaim.s are gros.sly 
inadequate and unrea.sonable. Appticant respectfully requests withdrawal of these rejections 
and alUwmce of tite claims or, at least, reopening of the prosecution with the issmnce of a 
proper office action. To the exteni the Examiner still maintain.s the rejections. Applicant 
respectfully xeqtie.sts clarification of die alleged di.sclo.stire of each and every claim element. At 
the very minimum. Applicant respectfully requests im elemen t-b y-elem ent ex planation (not just 
citation of paragraphs) as to which portions of the cited references actually teach or suggest the 
fbllowing elements as recited in claim 1 : 

/. "at lemt one oiHside sen>er for an imtrmted computer network " 
2, ''at leas! one imide server" 
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and the followmg elements as recited in claim 23: 
/, "a first companment" 

2. "a mxmd compartment " 

3. "a third compartmem" 

4. "a fourth compartment" 

5. "a fifth companment" 

6. "a sixth compartment" 

7. "a seventh compartmem" 

8. "at least: one eigitth compartnmit" 

9. "at least one ninth compartment" 

10. "at least one lemh coinpartment " 
IL "at least one eleventh compartment" 

12. ''at least one twelfth compartment" 

13. ''at least one thirteenth compartment" 

14. "afourteemh compartment" 

Othenifiu, Applicant perceives no other option but to appeal to the Board. Much as 
Applicant wouM like to avoid an expensive and protracted appeal^ the hrevity and arttbi^uity of 
the rejections make U impossible for Applicant to make any meaningful argument or 
amendment in a Request for Continued Examination. 
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V, CQMCLIISIQN 

In view of ihe foregoing, it is respecifuiiy submided thai the present applicaiiou h in 
condition for allowance, and an early indicaiion of the same is courteously solicited. The 
Examiner is respeciiijily a^quested to contact the undersigned by telephone at the below listed 
telephone number, in order to expedite resolution of iiny issues and to expedite passage of the 
present application to issue, if any commems, questions, or suggestions aise in connection wi th 
the present application. 

Please charge any shortage in fees due in connection with tlie filing of this paper to 
Deposit Account No. 50-4494, and please credit any excess fees to the same deposit account, 

Should the Exanuner believe anything further is desirable in order to pJace the 
application in even better condition for allowance, the Examiner is invited lo contact Applicant's 
undersigned representative at the telephone number listed below. 

Respectful I y subin i tied, 
GoodwiniProcter LLP 

/CeLi/ 

CeLi 

Registration No. L0214 



GoodwiniProcter LLP 

901 New York Ave., N.W- 
Washington, D.C. 20001 
{202} 346--4294 

Dat€id: September 9, 2009 
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